Quantum pseudo-randomness from cluster-state quantum computation 
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We show how to efficiently generate pseudo-random states suitable for quantum information 
processing via cluster-state quantum computation. By reformulating pseudo-random algorithms in 
the cluster-state picture, we identify a strategy for optimizing pseudo-random circuits by properly 
choosing single-qubit rotations. A Markov chain analysis provides the tool for analyzing convergence 
rates to the Haar measure and finding the optimal single-qubit gate distribution. Our results may 
be viewed as an alternative construction of approximate unitary 2-designs. 
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Methods for characterizing and efficiently generat- 
ing random quantum states and unitary operators have 
broad conceptual and practical significance across quan- 
tum physics. From a fundamental standpoint, a main 
motivation stems from the challenge of modeling com- 
plex quantum behavior, including quantum chaos ll||and 
typical entanglement in many-body systems 0, S 
0, 0, Q • Within quantum information science, states and 
unitaries sampled from the appropriate uniform (Haar) 
distribution provide the enabling resource in a growing 
number of algorithms and protocols. Remarkably, ran- 
dom pure states saturate the classical communication ca- 
pacity of a noisy quantum channel 0] , and allow super- 
dense coding of arbitrary quantum states • Random 
unitaries find applications in tasks ranging from approx- 
imate encryption and remote state preparation to 
unbiased noise estimation and selective process 

tomography [14 1. 

However, implementing exact randomization on a 
quantum computer is inefficient, as the number of re- 
quired elementary gates grows exponentially with the 
number of qubits. Still, it has been shown 

[i,[l2,[ll that 

one can generate pseudo-random (PR) quantum states 
and unitary operators which satisfy certain practical tests 
of randomness using only a polynomial number of gates. 
In particular, a framework for quantifying to what extent 
pseudo-randomness may simulate the Haar distribution 
for an intended randomization task is offered by the no- 
tion of a t-design In its essence, a state (unitary) t- 
dcsign is a probability distribution over pure states (uni- 
taries) whose statistical moments up to order t equal 
those from the Haar distribution. While efficient exact 
unitary 2-designs are known [l6l | , constructions of approx- 
imate 2-dcsigns as well as alternative schemes tackling 
higher-order moments are actively investigated 0, S 01- 
So far, existing studies have focused only on the circuit 
model of quantum computation (QC). 

In this work, we construct an efficient algorithm for 
PR state generation in the cluster-state paradigm of QC 
[rH |. This is crucial from an implementation perspec- 
tive, in that many of the above-mentioned applications 



of random states originate in quantum communication 
protocols, for which photonic entanglement and cluster- 
state QC provide a leading approach . Furthermore, 
we find that reformulating PR algorithms in a cluster- 
state picture suggests a path to optimize existing circuit 
constructions. In particular, by analyzing PR circuits in 
terms of classical Markov chains Q , we identify an opti- 
mal single-qubit gate distribution - complementing exist- 
ing results on optimal two-qubit gates [6|. Quantitative 
convergence bounds are obtained by invoking standard 
tools from spectral mixing analysis. 

Pseudo-Random Quantum Circuits.— A PR circuit on 
n qubits attempts to generate states and unitaries whose 
statistical properties mimic those of Haar-distributed 
counterparts by repeated applications of random one- 
and two-qubit gates. In the PR algorithm of [l^l, single- 
qubit gates drawn uniformly from the Haar measure on 
SU(2) are performed in parallel on each qubit, followed 
by a controlled phase (CZ) gate on all nearest-neighbor 
pairs. Iterating any quantum circuit constructed from 
a universal set of random gates eventually converges to 
the Haar measure as the circuit depth increases (isj . 
However, the rate of convergence for some test functions 
which probe arbitrarily high-order moments of the PR- 
distribution may scale exponentially with n. Thus, PR 
algorithms can adequately reproduce the Haar measure 
with polynomial effort only for a restricted class of test 
functions. This may suffice for practical applications as 
long as the quantities of interest are known to involve 
only low-order moments, as in ^-design approaches [1]. 

In our analysis, we select two illustrative test functions, 
and track them as a function of iteration. The first is the 
distribution of the squared moduli of state-vector com- 
ponents, P{r]), in the computational basis. For random 
pure states, this is given by the Porter-Thomas distribu- 
tion, Ppriy) = exp(-y), where y = Nr], N = 2"- 
Accordingly, we examine the Z2-distance between Ppx (y) 
and the PR state distribution. The second test func- 
tion we employ is the average subsystem entanglement, 
expressed jn terms of the Meyer- Wallach entanglement 
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which quantifies the average purity of single-qubit re- 
duced density matrices. For a random pure state, the 
expected value of Q is E(Q) = Qr = (2" - 2)/(2" + 1). 
Within the approach of generahzed entanglement [22| . 
Q is a representative of a class of quadratic measures of 
state delocalization and generalized purities @ , for which 
a similar analysis may be developed. 

Pseudo-Random Cluster-State Computation.— Cluster 
states are highly entangled states which serve as the basic 
resource for measurement-based QC 17[. They may be 
generated by applying CZ gates between qubits initially 
in the |-|-) state. Computation is executed by measuring 
qubits along desired axes in the x-y plane. The choice of 
measurement axis determines the operation that is im- 
plemented, and may depend on the outcome of a pre- 
vious measurement. A 2D qubit lattice with CZ gates 
applied between all nearest neighbors suffices for univer- 
sal QC. Measurements are performed by column from left 
to right, until a last column is left unmeasured - deter- 
mining the statistics over the computation outcomes. 




FIG. 1; Sdiematics of cluster-state PR architectures. Pairs 
of qubits subjected to CZ gates are connected by solid lines 
and each qubit is identified by the angle in the x-y plane 
that defines its measurement basis. Dashed lines represent 
additional CZ gates for the enhanced version of the algorithm. 

A cluster state architecture that implements the equiv- 
alent of 2 iterations of the PR algorithm of is depicted 
in Fig. [1] Using Euler-angie representation, measure- 
ment of 3 qubits in a row simulates a single-qubit gate 
H Z {ai-\-TTmai)X {f3i-\-T:mfj^) Z (ji-\-'n:rn^-) , where H is the 
Hadamard gate, Z{a.) {X{a)) is a z- {x-) rotation by an 
angle a, (a^, 7^) are the angles along which each qubit 
is measured in the x-y plane, and 0, 1 labels ad- 

ditional measurement-dependent tt rotations. Arbitrary 
single-qubit gates are effected by properly choosing the 
Euler angles. Because the Haar measure on SU(2) is in- 
variant under the extra tt rotations, the latter may be 
ignored. CZ gates performed between rows of the clus- 
ter state (vertical lines) serve as CZ gates acting between 
qubits in the circuit-based algorithm. In general, to sim- 
ulate i iterations of an 71-qubit PR circuit, a lattice of 
n X 3^ -I- 1 qubits is needed (where the extra 1 comes 
from the final, unmeasured column). The first column 
contains the initial state |'0o) on which the algorithm op- 
erates. While the latter can be arbitrary in principle, we 
always set |-0o) = |0 . . . 0) for PR state generation. 

Given the measurement pattern of Fig. [U a natural 
question arises: Can the convergence rate of the cluster- 
state PR algorithm be enhanced by filling in additional 
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FIG. 2: (Color online) Distance of the (normalized) distribu- 
tion of squared moduli state- vector components from PpT (y) 
for random states as a function of run time. □: Standard (6 
rows and connections every third column), vs Q- Enhanced 
(connections at every column) PR patterns. The run time 
equals the number of columns in the cluster state. Inset: Dif- 
ference of global entanglement, Q, from the expected random- 
state value, Qr, vs run time. For both test functions, the en- 
hanced version of the algorithm converges to the Haar average 
with a rate about 6 times faster than the standard rate. 



vertical lines (that is, by effecting additional CZ gates 
represented by dashed lines)? In this case, QC proceeds 
as before but measurement angles will be chosen ran- 
domly in the x-y plane. Fig. [5] illustrates the resulting 
improvement by comparing the decay rate of both P{y) 
and Q: For 6 row cluster states, both test functions con- 
verge approximately 6 times faster for the completely 
filled cluster state. Thus, the enhanced version of the 
PR cluster-state algorithm uses a factor of 6 fewer qubits 
and horizontal connections, and half the number of ver- 
tical connections to achieve a comparable distance from 
random-state behavior. 

Enhanced Pseudo-Random Circuit Design.— Because 
the cluster model is computationally equivalent to the 
circuit model [l7j , the improvement observed for the en- 
hanced cluster-state PR algorithm should have a circuit 
model analog. The single-qubit rotation equivalent to 
measuring a cluster qubit in a random basis in the x-y 
plane is an HZ{a) gate. Thus, once translated into the 
circuit model, the completely filled measurement pattern 
identifies a restricted family of random single-qubit gates 
which map the z-axis to the transverse plane. 

Why should such a restriction improve the convergence 
rate? The answer has to do with the relationship between 
the one and two-qubit gates comprising the algorithm. 
Single-qubit rotations that preserve the z-axis commute 
with CZ gates, thus they do not aid in scrambling the 
quantum state. The HZia) gates are non-invariant with 
respect to the z-axis. The inset in Fig. [5] contrasts the 
convergence to typical entanglement in PR circuits with 
fully random and restricted single-qubit gates. In the cir- 
cuit model, the decay rate of the enhanced algorithm is 
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only about 2 times faster, since a time step counts as a 
complete iteration. Still, depending on implementation, 
it may be easier to perform an HZ (a) gate than an arbi- 
trary single-qubit gate. This raises the following general 
question: Given a fixed two-qubit gate, what is the op- 
timal single-qubit gate distribution to employ? The key 
insight is to relate convergence properties of a PR circuit 
to those of an appropriate random walk 0| . 

Markov Chain Analysis.— As established in the 
idea is to map the evolution of the second moments of 
the final state under PR-unitaries to a classical Markov 
chain. Let a n-qubit density operator be expressed in the 
Pauli basis: p = 'Yliv'^'^^v, where is a tensor-product 
string of single-qubit identity and Pauli operators, spec- 
ified by the collective index v e T = {Q,x,y,zY^. The 
coefficients {cj} form a probability distribution over X. 
Let PR(£) be the family of PR circuits of depth I. The 
ensemble- averaged coefficients {EpR(£)(c^^)} also form a 
probability distribution over I. Under conditions de- 
scribed below, the rules for updating these coefficients 
follow a discrete-time Markov chain on I. That is, if 
the chain is initially distributed according to {c^g}, the 
distribution of the evolved state satisfies 



where M = {Afpjy} is the transition matrix of chain. 

Clearly, it suffices to construct M for a single itera- 
tion. Under a single-qubit gate in SU(2), each non-trivial 
Pauli operator transforms as Ua ^ R[pa) = X^h^ato't, 
a,6 G {x,y,z\, where R = {xah\ G S0(3). The corre- 
sponding 4x4 Markov matrix R is obtained by averag- 
ing the squared coefficients over the distribution of local 
gates. R can only be constructed when the ensemble av- 
erages of each cross term, \L(xahXac) with h ^ c, vanishes, 
leaving Rab = E(x^j). Because the single-qubit gates on 
different qubits are selected independently, the transfor- 
mation resulting from the overall local part of the PR 
map is the rt-fold tensor product of single-qubit trans- 
formations, L = R ". Since each CZ gate preserves the 
Pauli group and acts, up to phases, as a permutation on 
the columns of L, the full transformation M is a Markov 
matrix if i? is. 

In order to identify the optimal single-qubit gate dis- 
tribution, we take advantage of the fact that CZ gates 
do not distinguish between the y axes, and restrict to 
distributions which initially randomize states in the x-y 
plane. This allows the construction of a reduced Markov 
chain, whose transition matrix M' has exactly the same 
(non-zero) eigenvalues as M . Let P be a Pauli operator 
containing at least one Xi or Yi , and let P' be any oper- 
ator obtained from P by permuting Xi with Yi . Since M 
randomizes Xi and Yi, A1{P — P') = 0. This defines the 
kernel of M, which may be removed by defining new vari- 
ables 'E.f- = Xi ±Yi. Chain states including S~ may be 
discarded, whereas transitions within I' = {0, z,^}" are 
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FIG. 3: (Color online) Gap, A(c), between Ai = 1 and the 
largest non-unit eigenvalue of M' vs c, for n = 6 (solid line) 
and n = 10 (dashed line). The gap at c = {HZ (a) gates) is 
significantly larger than the gap at c = 1/3 (arbitrary random 
single-qubit gates), identifying the optimal gate set. Inset: 
Gap for c = 1/3 (circles) and c — (squares) vs n. 



described by M' . Let c € [0, 1] parametrize the extent to 
which the z-axis is left invariant. The single-qubit gate 
contribution to M' is then fully described by: 

/I 

R{c) = c 
\0 1-c 

For the PR circuits examined here, the Markov chain 
obtained by removing the identity (that is, by restrict- 
ing to T' — {0}") is ergodic, with a stationary distri- 
bution corresponding to the uniform distribution on X. 
The convergence is asymptotically exponential, with a 
rate r(c) determined by the gap between the largest 
and second largest eigenvalues, A(c) = Ai — A2, via 
r(c) = — ln(l — A(c)). Thus, the larger the gap the faster 
the convergence. Here, we are interested in the gap be- 
tween I and the next largest eigenvalue whose eigenvector 
has a non-zero component along \ipo){'4'o\- 

As seen in Fig. [31 the maximum gap for n ~ 6 
qubits, equal to 0.4135, occurs at c « 0.03. The gap 
for HZ{a) gates, A(0) sa 0.4071, is significantly larger 
than the gap for random rotations, A(l/3) ~ 0.2292, 
yielding r(0)/r(l/3) « 2.008. The agreement of this 
ratio with the data is clear from Fig. 21 which shows 
the decay rate of the total variation distance (TV) (that 
is, the Zi-distance) between the distribution undergoing 
the Markov process and the asymptotic distribution. For 
n ~ 10, the maximum gap is attained at c = 0. Remark- 
ably, as n increases, A decreases for unrestricted local 
gates, but increases for HZ{a) gates, see inset of Fig. 
[3l Thus, the larger n, the faster the Markov chain con- 
verges. While determining the asymptotic behavior of 
the gap is beyond our current scopes, this feature may 
prove advantageous for small-scale PR implementations. 

Cut- Off Behavior.— While an ergodic Markov chain 
is guaranteed to exponentially approach stationarity at 
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(Color online) Total variation distance, TV{£) 

_2 / «N 2, 



FIG. 4: 

1/2 — cj^(oo)|, as a function of iteration for a PR 

circuit with random single-qubit gates (circles) and HZ{a) 
gates (squares). Data is shown for n = 6 (solid lines) and 
n = 12 (dashed lines). Inset: Difference of global Meyer- 
Wallach entanglement from the expected random-state value 
as a function of iteration for a PR map on n = 6 qubits. 



long times, a practical question is to determine how soon 
the exponential regime is entered. In it was found 
that the distribution of entanglement over an ensemble 
of PR states remains far from the asymptotic distribu- 
tion until a time r is reached, numerical data suggesting 
that such a cut-off effect [23| becomes sharper as n in- 
creases. In our case, Fig. |4] shows no cut-off behavior in 
the TV for either HZ{a) gates or random single-qubit 
gates. Increasing n modifies the slope of the TV decay, 
but does not engender a cut-off phenomenon. Conclu- 
sions on the entanglement distribution are more delicate, 
as the Markov chain only describes convergence of the 
lowest entanglement moment. As seen in the inset, expo- 
nential convergence occurs immediately for Q in a circuit 
using random single-qubit gates. Under HZ{a) gates, 
however, Q is maximum for the first n/2 iterations be- 
fore exponential decay sets in [23 |. Thus, every realiza- 
tion of such a PR algorithm is maximally entangled for 
the first n/2 iterations, implying that the resulting entan- 
glement distribution is singular until t = n/2. This sug- 
gests a cut-off effect in the entanglement distribution of 
enhanced PR circuits, although not in the Markov chain 
describing the evolution of quadratic test functions. 

Discussion.— Our results on the emergence of typi- 
cal entanglement may naturally be viewed as probing to 
what extent PR circuits approximate a unitary 2-design. 
This follows from the fact that for every continuous lo- 
cal gate distribution, there is a discrete distribution over 
gates belonging to the single-qubit Clifford group which 
has the same corresponding Markov matrix. Thus our 
procedure can then be viewed as implementing a biased 
sampling from the n- qub it Clifford group, which is an 
exact unitary 2-design [16| . Beyond their use as approxi- 
mate 2-designs, however, the PR algorithms studied here 
are also approximate t-designs for some t > 2, since they 



converge to the Haar measure. While the fact that PR 
circuits yield approximate 2-designs has been formally 
proved very recently in (25| . establishing mathematical 
and physical connections between PR algorithms and ap- 
proximate ^-designs of higher order is an important next 
step toward harnessing quantum pseudo-randomness. 
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